NEC UNIVERGE IX1000/IX2000/IX3000 IKE Exchange Denial Of Service Vulnerabilities

Bugtraq ID:	16027
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Dec 21 2005 12:00AM
Updated:	Dec 21 2005 12:00AM
Credit:	Discovery is credited to NISCC, CERT-FI, and the Oulu University Secure Programming Group.
Vulnerable:	NEC IX3010 NEC IX2015 NEC IX2010 NEC IX2004 NEC IX2003 NEC IX1050 NEC IX1020 NEC IX1011 NEC IX1010
Not Vulnerable:

NEC UNIVERGE IX1000/IX2000/IX3000 IKE Exchange Denial Of Service Vulnerabilities

NEC UNIVERGE IX1000/IX2000/IX3000 products are prone to denial of service vulnerabilities. These issues are due to security flaws in NEC's IPSec implementation. These vulnerabilities may be triggered by malformed IKE traffic.

This issue was discovered with the PROTOS ISAKMP Test Suite and is related to the handling of malformed IKEv1 traffic.

NEC UNIVERGE IX1000/IX2000/IX3000 IKE Exchange Denial Of Service Vulnerabilities

These issues can be reproduced using the PROTOS ISAKMP Test Suite.

NEC UNIVERGE IX1000/IX2000/IX3000 IKE Exchange Denial Of Service Vulnerabilities

Solution:
The vendor has released an advisory, along with fixes to address these issues. Please see the referenced advisory for further information on obtaining fixes.

NEC UNIVERGE IX1000/IX2000/IX3000 IKE Exchange Denial Of Service Vulnerabilities

References:

• IX1000/IX2000/IX3000 ISAKMP Advisory (NEC)
  
• Multiple Vulnerability Issues in Implementations of ISAKMP Protocol (NISCC)